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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Previously Presented) A method of using accounting certificates to 
allow a subscriber of a home network to purchase services and products via a mobile 
communications network, the method comprising: 

sending a request for an accounting certificate from a subscriber's mobile 
terminal to a certificate issuing node in a visited network; 

upon receipt of the request at said node, sending an authorization request from 
said node to an online charging system of the subscriber's home network; 

at the online charging system, returning either an accept or deny service request 
message for the accounting certificate to said node, based on the subscriber's account 
data; 

in the event that an accept service request message is received by said node, 
sending the requested accounting certificate to the subscriber terminal; and 

sending the accounting certificate from the subscriber terminal via the mobile 

communications network to a provider of a product or service to be paid for. 

2. (Previously Presented) The method according to claim 1, wherein said online 
charging system to which said authorization request is sent is responsible for 
coordinating all charges made against subscribers of the home network. 

3. (Previously Presented) The method according to claim 1, wherein said 
certificate issuing node is owned by the operator of an access network used by the 
subscriber terminal. 

4. (Previously Presented) The method according to claim 3, wherein the access 
network is provided by the operator of the subscriber's home network, or by a visited 
network. 
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5. (Previously Presented) The method according to claim 1, wherein said 
certificate issuing node comprises a Public Key Infrastructure portal, which uses shared 
secret keys to communicate with a subscriber terminal. 

6. (Previously Presented) The method according to claim 5, wherein the Public 
Key Infrastructure portal communicates with a Bootstrapping Server Function of the 
subscriber's home network to obtain a shared secret previously agreed between the 
Bootstrapping Server Function and the subscriber terminal. 

7. (Previously Presented) The method according to claim 6, wherein the Public 
Key Infrastructure portal obtains the shared secret after receiving a request for an 
accounting certificate from the subscriber terminal 

8. (Previously Presented) The method according to claim 1, wherein the Public 
Key Infrastructure portal communicates with the subscriber's home network to obtain 
the identity of the responsible online charging system prior to sending said authorization 
request, or for authorization to issue accounting certificates in principle. 

9. (Previously Presented) The method according to claim 1 , wherein the 
provider of a product or service to be paid for, sends received accounting certificates to 
said certificate issuing node for settlement. 

10. (Previously Presented) The method according to claim 1, wherein the online 
charging system reports previously reserved credit as used and withdrawn, when a 
service has been delivered and a signed invoice received from the provider of a product 
or service to be paid for. 

11. (Previously Presented) The method according to claim 1, wherein the 
provider of a product or service sends an invoice to the subscriber tenninal for products 
or services which the subscriber proposes to purchase and, after receipt of this invoice, 
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the subscriber terminal sends the request for the accounting certificate to the certificate 
issuing node. 

12. (Previously Presented) The method according to claim 1, wherein the request 
for an accounting certificate is sent prior to receipt of the invoice at the temninal. 

13. (Previously Presented) The method according to claim 1. wherein said 
accounting certificate is secured by bootstrapping on an authentication and shared 
secret agreement procedure performed between the mobile terminal and the 
subscriber's home network. 

14. (Previously Presented) A Network Application Function (NAF) node for 
use in a first network of a mobile communications system, the node having a processor, 
a main memory coupled to the processor; and persistent storage associated with the 
processor; an interface towards one or more online charging functions, each online 
charging function coordinating charges for subscribers of a home network to which the 
online charging function belongs, an interface towards one or more product or service 
providers, and an interface towards subscribers roaming in said first network wishing to 
purchase products or services made available by said providers, the NAF node further 
comprising: 

a Public Key Interface (PKI) portal for receiving from a subscriber an accounting 
certificate request; 

the PKI portal for sending an authorization request from said node to an online 
charging system of the subscriber's home network; 

the PKI portal for receiving an accept or deny request from said online charging 
function; and 

the PKI portal for sending the requested accounting certificate to the subscriber 
terminal in the event that an accept service request message is received by the node. 

* « * 
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